Windows Services are like the stage hands in the theater. You don’t really know they are there, but you would miss them if they were not.
These background processes take care of various housekeeping roles in your Windows XP system. Not every service is necessary and stopping some from running will help both your system performance and possibly security.
I recently installed a fresh copy of Windows XP. Prior to doing anything on the system I took a snapshot of the services that were installed and running. They are presented here.

Let’s take a look at each one and decide whether or not we need them to perform the day to day functions on our Windows XP system.
- Application Layer Gateway Services
This services allows Windows applications to manipulate firewall rules and share your Internet connection. If you are running internet aware applications such as MSN Messenger, you should leave this enabled. Otherwise, disable it.
- Automatic Updates
The Automatic Update service will connect to Windows servers and download patches to your operating system. If you like full control over what is installed in your system, you should disable this service. If you trust that Microsoft will install compatible well tested patches then leave this service enabled.
- COM+ Event System
- Cryptographic Services
- DCOM Server Process Launcher
This service is required by the Windows XP Firewall and RPC.
- DHCP Client
The DHCP client service communicates with an upstream server to request a dynamic IP address. If you are connecting to the Internet and do not want to manage your IP addresses, leave this client enabled.
If you only have one computer and are willing to setup a static IP address, you can disable this service.
- Distributed Link Tracking Client
This service maintains the link between shortcuts and the underlying file. Best to leave this alone.
- DNS Client
The DNS client is responsible for resolving domain names. That is turn friendly names like www.faster-windows.com into an IP address that allows the computers to connect. Unless your computer is not going to be connected to a local network or the Internet, this service must be enabled.
- Error Reporting Service
“The Error Reporting Service collects, stores, and reports unexpected application errors or closures to Microsoft. It also authorizes error reporting for services and applications that run in non-standard environments. This service provides Microsoft product groups with efficient and effective information to debug driver and application faults.”
When an application crashes unexpectedly and displays a dialog asking to send information to Microsoft, it is this service doing the job.
If you do not want to send any error information to Microsoft, disable this service.
- Event Log
The Event Log service provides a repository of system events. This repository is updated by the operating system and various Windows applications. The Event Log is a useful place to look when applications are working properly or if you suspect their is a problem in your system. It’s best to leave this service enabled.
- Fast User Switching Compatibility
This service helps poorly written applications work under a multi-user environment. Windows XP has the ability to allow you to “switch away” from one login environment to another. If your daughter wants to hop on the computer and you are in the middle of something you do not need to logout. She can just switch to a different user.
If you are the only user of this system, you can disable this service.
- Help and Support
Much of the Windows Help database is based on the network. This service allows interaction between the Windows Help data and your computer. If you prefer to look for your own help (like on this website) disable the service.
- IPSEC Services
Provides security features for network communications. Leave this enabled.
- Logical Disk Manager
Provides the ability to detect the installation and removal of hard drives. If you have any dynamic disks, such as USB external hard disks do not disable this service.
- Network Connections
If you are connecting to the Internet, leave this enabled.
- Network Location Awareness (NLA)
Another core network service. Leave it enabled.
- Plug and Play
The plug and play service allows Windows XP to detect the addition or removal of hardware with little input from you. When you plug in a USB camera, the Plug and Play service works to make sure it’s setup and configured properly. You should generally leave this service enabled.
- Print Spooler
The Print Spooler service manages all local and network print queues and controls all print jobs. If you want to print or send a fax you need this service enabled.
- Protected Storage
Protected Storage provides a secure location to store private data. If you need to connect to the Internet with encryption using SSL (say to your bank) you need to leave this service running.
- Remote Procedure Call
Do not disable this service
- Remote Registry
The Remote Registry service allows a client computer with the appropriate permissions to view and edit the system registry on another Windows computer. Unless you are a system administrator or your computer is part of a managed corporate network you do not need this service.
- Secondary Logon
This service allows you to run an application using a login different then your own. It provides the RunAs feature of Windows XP. For example, if you are running as a Power User and need to run an application as an Administrator, you can use RunAs to specify the Administrator account and run the application under those credentials.
- Security Accounts Manager
Do not disable this service
- Security Center
The Security Center service was introduced in Windows XP SP2. It provides a centralized monitor for various security related sub-systems. These include the Windows Firewall, Anti-Virus protection and Windows Update. If you disable this service the sub-systems will continue to work. You will not have a central monitor application to manages these sub-systems.
- Server
This service allows for communication between other Windows computers over a network. Disabling it will prevent file, printer and pipe sharing over a network. It will not impede access to the Internet.
- Shell Hardware Detection
This service monitors and notifies the system of auto play events such as inserting a CD or DVD into your system. It allows you to define a particular action in response to an auto play event. For example, you can configure Windows Media Player to begin importing music when a CD is inserted.
- SSDP Discovery Service
“The Universal Plug and Play host service that is included with Windows XP supports peer-to-peer Plug and Play functionality for network devices. The UPnP specification is designed to simplify device and network service installation and management. The Universal Plug and Play host service uses the Simple Service Discovery Protocol (SSDP) to locate and identify UPnP network devices.” If you are not connecting to any UPnP devices you do not need this service. Some UPnP devices include printers, remote media servers.
- System Event Notification
- System Restore Service
- Task Scheduler
The Task Scheduler is used to setup application that run at a specific time. For example, you may want to run your backup program or disk defragmenter once a week. You would do it with the Task Scheduler. Few third party applications actually use the scheduler, most implement their own. If you don’t have any specific tasks you want to schedule, disable it until you do.
- TCP/IP NetBIOS Helper
If you are running a local Windows XP network, this service provides share and logon access between machines. If you are not, than you do not need this service.
- Terminal Services
This service provides the ability for remote desktop access to your computer. This is handy if you want to control your Windows XP over the network via VPN. Otherwise you can turn this off.
- Themes
Themes provides the “skin” that makes Windows XP look fancier then Windows 2000 and Windows 95. If you like the look, leave it enabled. If you want some performance gains. Disable it.
- WebClient
The WebClient service allows applications to access documents on the Internet. The service extends the network capability of Windows by allowing applications to access files on the Internet through the use of WebDAV.
If you think you will be publishing Websites or access files via WebDAV you should leave this enabled. If you didn’t understand any of what I just said, you should disable it.
- Windows Audio
If you listen to music on your Windows XP system, keep this service enabled.
- Windows Firewall/Internet Connection
This service provides the ability for your Windows XP system to share an Internet connection with other local system. It also provides firewall functions to limit the type of traffic allowed into and out of your machine. Disabling this may be considered controversial but I still tend to turn it off. Here’s my rationale.
My Windows XP system is one of three other computers in my house. These computers do not share their connection through this computer. Instead, all the network traffic passes through a router. This router also has it’s own firewall which protects my systems by limiting the types of traffic coming into the Internet.
The best analogy for this is the router firewall is like a lock on my house. Only certain people are allowed in and out. The Firewall service is like a lock on a room in my house, limiting who has access to my “room” even further.
I tend to like to keep my network connections simple.
- Windows Management Instrumentation
Provides information about the operating system to applications. If it is disabled, most applications will fail to run.
- Windows Time
The Windows Time service provides Windows XP with the ability to synchronize it’s clock from the Internet. While not necessary, I generally leave this on as it’s a “good-thing-to-do.”
- Wireless Zero Configuration
This service manages the automatic configuration of wireless network adapters. If you are using a wireless network adapter leave this service enabled.
- Workstation
The Workstation service manages all non web network connections. If you are doing anything beside browsing the world-wide-web (www) then leave this service enabled.
Bookmark this link in case you run into problems in the future. You may find that you will eventually have an application that fails to run because one of these services were disabled. The information here might help you track down which one.